Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
File:                     a46317f9-5181-35a7-ab20-00bacf68bf4e.roa (raw, json)
Hash identifier:          Q18w9TUfoe9JBfd89z+Kfio1+vVjry3+oSLFbBGel4w=
Subject key identifier:   EE:49:12:FE:83:AA:6D:07:BB:7E:15:8E:75:BF:2F:2F:B6:1A:79:65
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285845EF89359A8CEFF40AC2674100
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     6391
IP address blocks:        2605:8c80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:35:9a:8c:ef:f4:0a:c2:67:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=356d4411-f60e-40ea-8a2c-8cf788d41503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:05:b2:49:f2:db:47:15:da:a9:7e:2f:9c:
                    ae:85:9f:89:fd:a3:c5:96:42:4b:ff:11:1f:82:15:
                    2b:66:5c:56:5f:30:69:71:e6:e9:7c:5c:fa:16:71:
                    f9:af:cb:ca:7a:96:55:f9:00:7b:8f:64:b3:11:fc:
                    14:9a:21:82:3b:f0:73:9e:a8:43:3f:bd:83:9d:6d:
                    b2:8e:f6:a1:73:be:aa:2a:d8:b5:22:5d:09:16:8a:
                    e9:d8:05:54:37:cc:9a:4e:d2:75:11:8f:14:cf:ef:
                    21:90:03:41:fc:17:3e:c3:08:f9:10:e2:b0:17:5e:
                    0f:11:06:2d:51:65:b9:95:5d:53:a5:aa:70:5a:3c:
                    9c:0a:c2:03:04:8e:af:46:35:aa:30:8c:04:29:7a:
                    29:1c:90:c6:c2:f3:53:fd:9c:58:46:be:d1:b8:d4:
                    27:4d:22:19:db:0a:7c:eb:98:cc:a5:f1:99:e8:c4:
                    9c:91:d9:41:0d:bb:66:0b:74:cb:56:da:6b:13:f2:
                    77:9e:9a:0a:04:91:43:01:28:f3:4f:91:0c:49:72:
                    a9:e4:50:e3:ec:68:1c:75:03:5f:10:3a:2c:23:65:
                    73:a4:6d:44:b1:1a:b1:4a:3a:44:d1:a1:0d:3c:1a:
                    0e:01:1a:a2:ec:84:2c:62:34:1e:27:8f:f7:df:d2:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:49:12:FE:83:AA:6D:07:BB:7E:15:8E:75:BF:2F:2F:B6:1A:79:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bb:73:a6:e4:e4:29:ca:4a:1c:40:ff:83:2d:c8:25:50:8b:
         3b:07:7a:09:4a:b6:a0:bd:79:65:9f:43:81:6c:ff:e5:dd:39:
         b7:45:89:2d:e2:02:16:0a:09:1b:3f:42:23:39:fd:52:eb:ed:
         5d:d1:da:9e:05:26:cf:bf:3d:38:c0:dc:d4:90:c2:22:5d:5b:
         97:46:3a:fa:2d:03:4d:52:eb:35:95:84:5a:64:0e:35:99:b0:
         98:75:18:74:d7:ec:88:f7:cc:02:bd:68:0c:c3:d3:bc:2b:bb:
         94:3d:21:1d:4e:c9:bb:03:05:c1:0f:31:c3:9a:21:16:2e:11:
         bb:1c:2b:27:47:b6:e9:c4:b0:33:82:c3:89:09:4f:90:20:bf:
         47:f2:71:86:15:7d:f1:bd:56:65:0a:21:80:68:68:e7:fb:12:
         4b:83:38:25:fd:38:ba:e0:1c:d0:1d:58:1e:8e:c4:3c:d9:8d:
         d8:a3:a6:09:78:73:4b:26:bb:e0:a7:bd:4f:62:68:e1:ed:57:
         16:48:13:25:a8:ed:2a:33:5f:25:be:7e:09:c9:1d:15:d9:75:
         83:4d:7a:58:b3:e1:70:81:b4:ed:df:da:a5:31:ec:26:ce:8f:
         24:30:f9:28:5e:45:03:2a:71:c3:cb:04:ea:b6:17:0c:99:15:
         b6:68:e4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:53:47 2024 by rpki-client on console-ams.rpki-client.org